Workbench Cookie Notice

Essential-only launch posture

Workbench uses only cookies and browser storage reasonably necessary to provide and secure the Service at launch. HardwareHub does not use advertising cookies, cross-site tracking, behavioral-advertising pixels, third-party analytics, or session replay in Workbench.

Because nonessential cookies are disabled, Workbench does not display a consent banner merely to obtain consent for analytics or advertising that it does not use. HardwareHub must update this notice and implement any legally required consent control before enabling a nonessential category.

What the essential technologies do

• Authentication and session security: keep you signed in, protect the session, and support account verification and recovery.
• Request and abuse protection: help prevent cross-site request forgery, replay, automated abuse, and excessive requests.
• Continuity and preferences: remember the selected workspace or project, interface preferences, unsent drafts, and opaque request or session identifiers needed to complete an action. Workbench does not intentionally retain complete conversation bodies in browser storage after signout or an account change.
• CAPTCHA: Cloudflare Turnstile may use necessary browser and device signals when public account creation is enabled.
• Billing: Stripe may use necessary cookies and browser storage on its hosted checkout and customer-portal pages.
• Hosting and delivery: Vercel and Supabase receive ordinary request and security data needed to deliver and protect the Service.

How long first-party storage lasts

• Access continuity: up to 15 minutes.
• Selected workspace and scope: up to 30 days.
• Timezone and timezone source: up to one year.
• Authentication: for the authenticated session lifetime, subject to the authentication provider's security and refresh controls.
• Session storage: ordinarily until the browser tab or session ends.
• Local storage: until the preference, unsent draft, or continuity record is replaced, signout or account change removes content-bearing HardwareHub records, or the user clears browser storage. Workbench removes obsolete records when the relevant workflow supports it.

Turnstile, Stripe, Google sign-in, Supabase, and Vercel may use necessary cookies or device signals under their own notices when the corresponding feature is enabled. HardwareHub does not authorize those providers to use Workbench User Content for advertising.

Your controls

Browser controls can remove or block cookies and storage, but essential features may then stop working. HardwareHub honors Global Privacy Control as an opt-out from sale, sharing for cross-context behavioral advertising, and targeted advertising; none occurs in Workbench at launch. The older Do Not Track signal does not change the essential-only behavior.

Questions or requests: privacy@hardwarehub.io.